Malicious
4ff988e9bc434208b2d763e6f29987e3
ZIP Archive
MD5: 4ff988e9bc434208b2d763e6f29987e3
Size: 615 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
615 B · 615 B
First seen
2026-08-03 12:04 · 2 months ago
Last seen
2026-08-03 12:04 · 2 months ago
Last analysis
2026-08-03 12:04 · 2 months ago
Hashes
MD5
4ff988e9bc434208b2d763e6f29987e3
Sha1
0634efdfd7e5ec17b5d380a0c8811181bcdb06e1
Sha256
2078b7f36361c1b4568fbd5639845802458459268efd69e8e2d9a3bc6751591b
Sha384
2d1119e3bcc73bee93ef9ca2c2a99fed3510c70f0edcfc14fffb58b47fbbe2d898d84d914594248d55e810697a8b4ea8
Sha512
005cd46ee1690a8e5fcdcca3eaa1cdde9022402b8588e3305a9efa348cebac58591fc5ec8988719d69e7f2fc0a13067dacbf42dae8c6bb2b415124c60d51b0df
SSDeep
12:5jXjDcl5elL37l4vN4C/IdE+37mX1DFPfvuXFkjDpaNXn:9Xjgl4R54vH/ICXFDFPfvuVkjEXn
TLSH
4FF002D09825D845E09789F2D2FB2090459367D05206A00A7ABCE903B5B378249D5641
3 malicious · 3 files
ZIP4ff988e9bc434208b2d763e6f29987e3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKJustificantePDF2107-S39K0T.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIP4ff988e9bc434208b2d763e6f29987e3T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKJustificantePDF2107-S39K0T.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
4ff988e9bc434208b2d763e6f29987e3 › JustificantePDF2107-S39K0T.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account